Oracle Business Intelligence vulnerabilities
99 published vulnerabilities in Oracle Business Intelligence, 3 of them exploited in the wild. The most were published in 2020 (17), and 15 so far in 2026.
Oracle Business Intelligence vulnerabilities by year
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Oracle Business Intelligence vulnerabilities
- CVE-2020-17530 Apache Struts Remote Code Execution
- CVE-2020-14864 Oracle Business Intelligence Enterprise Edition Path Transversal
- CVE-2020-11023 JQuery Cross-Site Scripting (XSS)
- CVE-2022-23305 SQL injection in JDBC Appender in Apache Log4j V1
- CVE-2021-2456 Auth bypass in Business Intelligence Enterprise Edition
- CVE-2020-9480 Improper Authentication in Apache Spark
- CVE-2020-2950 Auth bypass in Oracle Business Intelligence Enterprise Edition
- CVE-2018-8013 Deserialization of Untrusted Data in Apache Batik
- CVE-2026-71055 Auth bypass in Oracle Business Intelligence Enterprise Edition
- CVE-2022-23302 Deserialization of untrusted data in JMSSink in Apache Log4j 1.x
- CVE-2022-23307 A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.
- CVE-2026-60671 Missing authorization in Oracle Business Intelligence Enterprise Edition
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.